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Description 

MOBILE DEVICE COMMUNICATIONS SYSTEM AND METHOD 

5 Technical Field 

The present invention relates to a communications 
system and a communications method using a network, and 
more specifically to a mobile device communications system 
and method which are provided with a plurality of service 
10 providing servers and perform communications using a mobile 

terminal . 

Background Art 

FIG. 33 is a block diagram of the system 

15 configuration of the conventional technology of the mobile 

device communications system, for example, a mobile device 
packet network. In FIG. 33, the user of the system, that 
is, a client, performs communications between mobile 
devices or with a plurality of service providing servers 

20 using mobile devices (MS) 100a, 100b, for example, a 

mobile phone. 

In FIG. 33, a mobile device packet network includes, 
for example, a mobile IP (Internet protocol) network 101, a 
network access device (NAS) for performing a process 

25 corresponding to the access gained by each of mobile 

devices (MS) 100a, 100b, ... to the mobile IP network 101, 
or foreign agents (FA) 102a, 102b, routers (R) 103a, 

103b, and 103c connected to the input/output point of the 
service providing server of the network 101, a user 

30 authentication device 104 connected to the routers, load 

balancers (L. B.) 105a, 105b, and 105c connected to each 
router, a local area network or wide area network (LAN /WAN) 
106 for connection of these load balancers with a plurality 
of service providing servers, and a home agent (HA) 107 on 

35 a mobile IP network. 
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A plurality of service providing servers form a group 
configured by a plurality of servers for providing the same 
services. For example, service providing servers 110a, 
110b, 110c, . . . are configured by servers capable of 
5 providing the same services as a group. Therefore, for 

example, servers of a group configured by service providing 
servers 111a, 111b, 111c, , . * and servers of a group 
configured by service providing servers 112a, 112b, 
112c, provide different services* 

10 In the mobile device packet network shown in FIG. 33, 

communications are performed between the mobile devices, 
for example, a mobile phone and a service providing server, 
as described above. Since a server capable of providing a 
service requested by a client forms a group as described 

15 above, a load balancer for processing an input packet from 

a client is provided at a stage before the service 
providing server such that input packets can be distributed 
to the service providing servers in accordance with the 
balancing policy by which the loads of the servers can be 

20 balanced* This is called load balancing. 

In the common load balancing system, a grouped 
service providing server is assigned representative address 
information, a client transmits a packet using the 
representative address information as a destination, and 

25 the packet is distributed to any service providing server 

in the group based on the balancing policy of the load 
balancer . 

The balancing policy can be a round robin policy, a 
weighted round robin policy, a priority policy, a minimum 
30 number of connections policy, a fastest response time 

policy, a CPU load policy, etc. A balancing policy 
information table indicating the above-mentioned balancing 
policies is provided for the load balancer. 

For example, in a mobile device packet network 
35 operated by a common carrier for providing a communications 



3 

service, there are a large number of users, and a plurality 
of routers 103a, 103b, and 103c and load balancers 105a, 
105b, and 105c are provided at the input /output point of 
the service providing servers of the mobile IP network 101 
5 shown in FIG. 33 to distribute the users, thereby 

performing load balancing for a number of service providing 
servers . 

However, with the above-mentioned configuration, when 
a mobile device, for example, a mobile phone 100a moves 

10 during the communications, the input /output point of the 

service providing server to the mobile IP network 101 
dynamically changes. For example, communications are first 
performed through the router 103a, the load ' balancer 103c 
and the load balancer 105c. 

15 In such a case, for example, when the three load 

balancers 105a, 105b, and 105c perform load balancing based 
on the respective balancing policies, a packet can be 
distributed to different service providing servers in the 
same group. In this case, there can be the problem that a 

20 TCP connection, that is, a connection for reception of a 

specific service, cannot be maintained . 

Furthermore, in the above-mentioned case, for example, 
although the load balancers 105a and 105c distribute 
packets to the same service providing server in the group, 

25 the packets do not pass through the same path between the 

mobile IP network 101 and the service providing servers if, 
for example, the mobile device 100a transmits an up packet, 
that is, a packet to a service providing server, moves 
during reception of a down packet, that is, a packet from a 

30 service providing server, and the up packet after the 

movement passes through the different load balancer, 
thereby causing the following five problems. 

The first problem is that it requires a long time to 
switch services. The management of a TCP connection 

35 corresponding to one service is to be performed on the 
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service providing server side, and a TCP connection is to 
be reconnected each time a service is switched as viewed 
from the mobile device side, thereby requiring a long time 
to switch the service, 
5 The second problem is that it can not balancing a 

risk when a service providing server goes down- If a 
service providing server which manages a TCP connection 
goes down, the connection cannot be switched to the server 
for providing the same . services, and services cannot be 

10 provided until the faulty service providing server recovers 

from the fault. 

The third problem is that proxy accounting 
information can not be generated. That is, only the 
service providing server which manages the TCP connection 

15 can perform an authenticating process in a contract service 

unit in providing a service for a client, and no proxy 
generation of accounting information can be performed for 
pay contents. 

The fourth problem is that protocol conversion of a 

20 transport layer can not be performed between a wireless 

network and a cable network. There is a difference in 
delay time, etc* between a wireless network and a cable 
network. Therefore, to set a standard Internet service in 
the optimum format in the wireless communications, it is 

25 necessary to convert a window size {the amount of data 

which can be transmitted at a time), etc, that is, a 
protocol conversion of a transport layer between the 
wireless network and the cable network. If packets are not 
transmitted through the same path, a trunk device for 

30 protocol-converting a transport layer cannot be provided. 

The fifth problem is that no gateway function between 
the network of the Internet protocol version (IPV) 4 and 
the network of the IPV6 can be provided. Recently, with an 
increasing number of mobile phones, large expansion of IP 

35 addresses is required, and there are plans to implement 
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IPV6. When IPV6 is implemented, a gateway function will be 
required between the current IPV4 network and the IPV6 
network- However, when packets are not transmitted through 
the same path, the gateway function cannot be provided, 
5 The present invention has been developed to solve the 

above-mentioned problems, and aims at setting the same path 
for packets which configure, for example, the same TCP 
connection although a plurality of input/output points are 
provided on the service providing server side of an IP 

10 network and a load balancer is provided for each 

input /output point, and maintaining a TCP connection 
although a mobile device performs communications while it 
moves* Another object of the present invention is to 
provide a gateway function in the path to avoid the 

15 necessity for making time for switching services, balance a 

risk when the service providing server goes down, perform 
proxy generation of accounting information, and" perform a 
transport layer protocol conversion, and further realize a 
gateway function between the IPV4 network and the IPV6 

20 network. 

Disclosure of the Invention 

FIG, 1 is a block diagram of the configuration 
showing the principle of the mobile device communications 

25 system according to the present invention. FIG. 1 is a 

block diagram of the configuration showing the principle of 
the communications system which is provided with service 
providing servers 7a, 7b, 8a, 8b, . and allows 

mobile terminals la, In to establish communications. 

30 In FIG . 1, the mobile terminals la, In are 

connected to first network means 2 having a plurality of 
input/output points to a service providing server, and can 
be, for example, a mobile IP network, 

A plurality of first communication distribution means 

35 3a, 3b, . . . are, for example, load balancers, and are 



connected to each of the plurality of input/output points 
of the first network means 2. 

Second network means 4 is a network to which the 
first communication distribution means 3a, 3b, * * * are 
connected, and can be, for example, a local area network or 
a wide area network* 

Third network means 5 is a network to which the 
plurality of service providing servers 7a, 7b, 8a, 
8b, , «. . are connected, and can be, for example, a local 
area network or a wide area network. 

A plurality of second communications distribution 
means 6a, 6b, * , . are connected between the second network 
means 4 and the third network means 5, distributes a 
series communications between a mobile terminal and a 
service providing server to any of the plurality of service 
providing servers, and can be, for example, a packet 
gateway device. 

Then, the first communication distribution means 3a, 
3b, . . . are configured to distribute a series of 
communications between a mobile terminal and a service 
providing server to any of a plurality of second 
communications distribution means 6 through the second 
network means 4 - 

According to an embodiment of the present invention, 
the system further comprises session management means for 
assigning an identifier to a session which is a series of 
communications between a mobile terminal and a service 
providing server, and managing the identifier. Each of the 
first communication distribution means 3a, 3b, , * . further 
comprises same storage contents destination storage means 
for storing any of the second communications distribution 
means 6a, 6b, * * * for distributing a series of 
communications corresponding to the identifier of a session 
as the series of communications between a mobile terminal 
and a service providing server. 



According to an embodiment of the present invention, 
a plurality of service providing servers configure a 
plurality of groups each being configured by servers which 
provide the same services, the mobile terminal specifies a 
representative address for each of the plurality of groups, 
and establishes communications to and from a service 
providing server, and the second communications 
distribution means 6a, 6b, . - - can distribute a series of 
communications to any of the service providing servers in 
the group specified by the representative address. In this 
case, when the mobile terminal changes the representative 
address to switch a service to be received in a series of 
communications, the second communications distribution 
means 6a, 6b, . . . can distribute the subsequent 
communications in the series of communications to any of 
the service providing servers in the group specified by the 
representative address after the change, and continue the 
ser i es Q f communications. 

Furthermore, according to an embodiment of the 
present invention, when the second communications 
distribution means 6a, 6b, . . . distribute a series of 
communications to any of the plurality of service providing 
servers, the system can further comprise service 
authentication means for authenticating the qualification 
of a user of a mobile terminal for a service provided by 
the service providing server* 

Furthermore, according to an embodiment of the 
present invention, the second communications distribution 
means 6a, 6b, m . . can also distribute a series of 
communications not only to a plurality of service providing 
servers, but also to a server outside the mobile device 
communications system. The mobile device communications 
system can further comprise accounting information 
generation means for generating accounting information for 
a service received by the mobile terminal from a service 
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providing server or a server outside the mobile device 
communications system. 

In a mobile device communications method according to 
the present invention, a mobile terminal can transmit a 
5 packet in a series of communications by specifying any of a 

plurality of service providing servers, a load balancer 
which receives the packet can distribute the packet to any 
of the plurality of packet gateway devices corresponding to 
an identifier for the series of communications, and the 

10 packet gateway device to which the packet is distributed 

can distribute the packet to any of the plurality of 
service providing servers which provide the same services 
as the service providing server specified by the mobile 
terminal. The load balancer corresponds to the first 

15 communications distribution means, and the packet gateway 

device corresponds to the second communications 
distribution means . 

In this method, a packet (down packet) in a series of 
communications from the service providing server to the 

20 mobile terminal is transmitted first from the service 

providing server to the packet gateway device which has 
distributed a packet (up packet) from the mobile terminal 
to the service providing server, transmitted from the 
packet gateway device to the load balancer which has 

25 distributed the up packet, and finally transmitted to the 

mobile terminal. 

In addition, according to the present invention, a 
portable computer-readable storage medium is used by a 
computer forming the packet gateway device, and stores a 

30 program used to direct the computer to perform the steps 

of: storing a destination address and a source address of a 
packet received from the load balancer using a unique 
source port number as a key; setting the unique source port 
number as a source port number of a packet header; 

35 selecting a plurality of service providing servers capable 



of providing a service requested by a mobile terminal from 
among a plurality of service providing servers so that the 
selected service providing server can share the load; and 
setting the addresses of the selected service providing 
5 servers as destination addresses and the address of the 

apparatus as a source address, and transmitting a packet to 
the service providing server. When the mobile terminal 
moves and the corresponding network access device is 
switched, the mobile terminal has the link of the PPP 
10 temporarily suspended. However, the PPP protocol stack 

does not notify the TCP protocol stack of the suspension, 
thereby preventing the TCP connection from being 
disconnected. 

Also used as a storage medium by the computer forming 

15 the packet gateway device is a portable computer-readable 

storage medium storing a program used to direct a computer 
to perform the steps of: retrieving mobile device 
identification information about the mobile terminal as a 
source of the packet received from the load balancer; 

20 retrieving the destination address of the received packet; 

and determining whether or not the service provided by the 
service providing server of the destination address can be 
provided for the user of the mobile terminal according to 
the mobile device identification information and the 

25 destination address* 

Furthermore, used as a storage medium by a computer 
forming the packet gateway device, there is also a portable 
computer-readable storage medium storing a program used to 
direct the computer to perform the steps of: retrieving the 

30 destination address and the source address of a packet 

received from a load balancer, and setting them in an 
accounting record when a series of communications between a 
mobile terminal and a service providing server start; 
incrementing the number of packets of an accounting record 

35 each time a packet is received from the load balancer until 
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the series of communications terminate; retrieving a packet 
length from the received packet, and adding the packet 
length to the packet length of the accounting record; and 
changing the source address in the accounting record into 
5 the identification information about the user of the mobile 

terminal, and the destination address into the information 
about the service providing server when a series of 
communications terminate ♦ 

Used by a computer forming the packet gateway device 

10 is a program used to direct the computer to perform the 

procedures of: storing the destination address and the 
source address of the packet received from a load balancer 
using a unique source port number as a key; selecting means 
for setting the unique source port number as a source port 

15 number of a packet header, and a plurality of service 

providing servers capable of providing a service requested 
by a mobile terminal from among a plurality of service 
providing servers so that the loads of the service 
providing servers can be balanced; and setting the address 

20 of the selected service providing server as a destination 

address, and the address of the apparatus as a source 
address, and transmitting the packet to the service 
providing server. 

Used as a program by the computer forming the gateway 

2 5 device is a program used to direct a computer to perform 

the procedures of: retrieving mobile device identification 
information about the mobile terminal as a source of the 
packet received from the load balancer; retrieving the 
destination address of the received packet; retrieving the 

30 destination address of the received packet; and determining 

whether or not the service provided by the service 
providing server of the destination address can be provided 
for the user of the mobile terminal according to the mobile 
device identification information and the destination 

35 address- 



Furthermore, used by a computer forming the packet 
gateway device, there is also a program used to direct the 
computer to perform the procedures of: retrieving the 
destination address and the source address of a packet 
5 received from a load balancer, and setting them in an 

accounting record when a series of communications between a 
mobile terminal and a service providing server starts- 
incrementing the number of packets of an accounting record 
each time a packet is received from the load balancer until 

10 the series of communications terminate; retrieving a packet 

length from the received packet, and adding the packet 
length to the packet length of the accounting record; and 
changing the source address in the accounting record into 
the identification information about the user of the mobile 

15 terminal, and the destination address into the information 

about the service providing server when a series of 
communications terminate . 

As described above, according to the present 
invention, a plurality of packet gateway devices are 

2 0 provided between the load balancer and a plurality of 

service providing servers provided at a plurality of 
input/output points of the network to which a mobile device 
is connected, and a series of communications of packets 
between one of a mobile device and service providing 

2 5 servers can be performed constantly through the same packet 

gateway device. 

Brief Description of the Drawings 

FIG * 1 is a block diagram of the configuration 
30 showing the principle of the mobile device communications 

system according to the present invention; 

FIG. 2 is a block diagram of the system configuration 
of a mobile device packet network according to an 
embodiment of the present invention; 
35 FIG* 3 shows the sequence of the processes between 



the apparatuses when a session starts; 

FIG. 4 is a block diagram of the configuration of the 
user authentication device; 

FIG, 5 shows an example of a flowchart of the address 
5 assigning process by the user authentication device; 

FIG. 6 shows a packet format according to an 
embodiment of the present invention; 

FIG. 7 shows an example of the data of the address 
information table in the user authentication device; 
10 FIG. 8 shows an example of the data of the user 

information table in the user authentication device; 

FIG. 9 is a block diagram of the configuration of the 
session management device; 

FIG. 10 shows an example of the data of the session 
15 information table; 

FIG. 11 shows the state transition of a session 

state; 

FIG. 12 is a block diagram of the configuration of 
the load balancer; 
20 FIG. 13 shows an example of a flowchart of the load 

balancing process by the load balancer; 

FIG. 14 shows an example of the data of the balancing 
policy information table in the load balancer; 

FIG. 15 shows an example of a data format of the 
25 packet header; 

FIG. 16 shows the configuration of the packet gateway 
device; 

FIG. 17 is a flowchart (1) of the up packet 
distributing process by the packet gateway device; 
30 FIG . 18 is a flowchart (2) of the up packet 

distributing process by the packet gateway device; 

FIG. 19 is a flowchart (3) of the up packet 
distributing process by the packet gateway device; 

FIG . 20 is a flowchart (1) of the down packet 
35 distributing process by the packet gateway device; 



FIG. 21 is a flowchart (2) of the down packet 
distributing process by the packet gateway device; 

FIG. 22 shows an example of the data of the address 
information storage table in the packet gateway device; 
5 FIG. 23 shows an example of the data of the balancing 

policy information table in the packet gateway device; 

FIG. 24 shows the address conversion by the packet 
gateway device; 

FIG. 25 is a flowchart of the service authenticating 
10 process by the packet gateway device; 

FIG. 26 shows an example of the data of the service 
order information table in the packet gateway device; 

FIG* 27 shows an example of the data of the service 
providing server information table in the packet gateway 
15 device; 

FIG. 25 is a flowchart of the proxy accounting 
information process by the packet gateway device; 

FIG* 2 9 shows an example of the data of the 
accounting record generated by the packet gateway device; 
20 FIG. 30 shows a sequence of the processes performed 

between the apparatuses by the user log out when a session 
terminates; 

FIG* 31 shows a sequence of the processes performed 
between the apparatuses in a dormant state; 
25 FIG. 32 shows loading a program to a computer to 

realize the present invention; and 

FIG* 33 is a block diagram of the configuration 
according to the conventional technology of a mobile device 
packet network* 

30 

Best Mode for Carrying Out the Invention 

FIG. 2 is a block diagram of the system configuration 
of the mobile device packet network according to an 
embodiment of the present invention* In this system, 
35 mobile devices (MS), for example, mobile phones 20a, 
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20b, . * * are connected to, for example, a mobile IP network 
21 through network access devices (NAS) or foreign agents 
(FA) 22a, 22b, by wireless or cable. 

There is a plurality of, for example, three 
5 input/output points on the service providing server side of 

the network 21, and the input /output points are 
respectively connected to routers <R) 23a, 23b, . . . and 
load balancers (L. B.) 25a, 25b, ... as shown in FIG. 2. 
The load balancers {L. B.) are connected to a local area 

10 network or wide area network (LAN /WAN) 26. 

The system is provided with a user authentication 
device 24 for managing users and a session management 
device 27 for managing the session of the 
transmission/reception of a series of packets from the 

15 access of, for example, a mobile device to the mobile IP 

network 21 to the completion of necessary communications* 
The user authentication device 24 is connected to, for 
example, the routers 23a, 23b, ... of the input/output 
points of the network 21 on the service providing server 

20 side, and is also connected to the session management 

device 27 . 

The session management device 27 and a plurality of 
packet gateway (GW) devices 28a, 28b, . . . are connected to 
the local area network or wide area network (LAN /WAN) 26 to 

25 which the load balancers (L. B.) 25a, 25b, . are 

connected. These packet gateway devices have the most 
significant functions in the embodiments of the present 
invention as described later* 

Each packet gateway device is connected by a number 

30 of service providing servers and LAN /WAN 29. It is assumed 

that a number of service providing servers respectively 
belong to same groups. For example, service providing 
servers 30a, 30b, . . . make a group, and the servers in the 
group are to provide the same services, and the mobile 

35 devices establish communications using the representative 
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address of' the group as described later* For example, 
service providing servers 31a, 31b, . . ♦ provide services 
different from those provided by service providing servers 
32a, 32b, , . - 

5 FIG, 3 shows the sequence of the processes performed 

among apparatuses when a session starts in the system shown 
in FIG. 2. The sequence of the processes shown in FIG- 3 
are performed among the mobile device 20, the network 
access device 22, the load balancer 25, the user 
10 authentication device 24, the session management device 27, 

the packet gateway device 28, and the service providing 
server 30. 

The packet format and the packet sequence of the 
packet communications among the mobile device 20, the 

15 network access device 22, and the user authentication 

device 24 are in accordance with the protocol suggested in 
the diameter mobile IP extensions of the Internet draift, 
and the detailed explanation is omitted here. 

On the other hand, the packet sequence and the packet 

20 format among the user authentication device 24, the session 

management device 27, and the packet gateway device 28 are 
processed regardless of the provisions, and are specific to 
the present embodiment • 

In FIG* 3, in accessing the mobile IP network 21 from 

25 the mobile device 20, the network access device 22 

transmits an access request prescribed by the above- 
mentioned protocol to the user authentication device 24* 

FIG. 4 is a block diagram of the configuration of the 
user authentication device. The user authentication device 

30 is configured by a LAN driver unit or a WAN driver unit 41, 

a TCP/IP protocol handler unit 42, a communications control 
unit 43, a user management unit 44, and a server monitor 
unit 45, and further provided with an address information 
table 4 6 managed by the user management unit 44 and the 

35 server monitor unit 45, and a user information table 47 



managed by the user management unit 44, A LAN or a WAN 
connected to the LAN driver unit or a WAN driver unit 41 
corresponds to the network 26 connected through the session 
management device 27 as shown in FIG. 2, or the mobile IP 
network 21 connected through the routers 23a, 23b, * * * 

The TCP/IP protocol handler unit 42 includes a user 
datum protocol and all of the TCP/IP protocol set, 

FIG. 5 is a flowchart of the address assigning 
process of the user authentication device. In this process, 
the process of assigning or retrieving an IP address to the 
session to be or already started in response to the access 
request received from the network access device 22 is 
performed* 

When the process is started as shown in FIG* 5, first 
in step SI, an access request packet from the network 
access device 22 is received, and a session information 
retrieval packet is transmitted in step S2 by the user 
management unit 44 to the session management device 27 as 
shown in FIG. 3. In step S3 r a session information 
retrieval reply packet is received from the session 
management device 27, 

FIG, 6 shows the packet format of a packet to be 
explained later in addition to the session information 
retrieval packet and the session information retrieval 
reply packet* The session information retrieval packet 
stores the type of session information retrieval as a 
packet type after the TCP/IP header, and stores mobile 
device identification information as trailing information 
in the packet* The mobile device identification 

information corresponds to an identifier, and not a phone 
number, for identifying each mobile device* This 
identification information is assumed to be retrieved from, 
for example, an access request packet* 

The session information retrieval reply packet stores 
a TCP/IP header, a session information retrieval reply 
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indicating . a packet type, mobile device identification 
information (identifier) , a retrieval result indicating 
whether or not there is a record of a session corresponding 
to the mobile device identifier, and, if there is the 
record, an IP address assigned to the session* 

Back in FIG- 5, it is determined in step S4 whether 
or not there is a new connection. In a new connection, the 
session information table does not store the record of the 
session corresponding to the mobile device identifier. In 
this case, an address to be assigned is determined in step 
S5. 

The determination is described in detail in steps S10 
through S16 shown on the right side of FIG. 5. In order to 
balance the load, the record having the number of addresses 
in the smallest address range assigned in the address 
information table 4 6 is retrieved, an address to be 
assigned is determined, and an access accept packet is 
transmitted to the network access device 22 in step S6, 
thereby terminating the process. 

If it is not a new connection in step S4, that is, if 
a session corresponding to the mobile device identifier has 
been entered in the session information table, then the IP 
address corresponding to the session is used as is in step 
37, and the access accept packet is transmitted in step S6, 
thereby terminating the process. 

As described above, a session refers to the 
transmission/reception of a series of packets up to the 
user log-out by a mobile device using an IP address 
assigned by the user authentication device 24. Therefore, 
when a user is provided with different services in a 
session, a plurality of TCP connections corresponding to 
each service are contained in the session. 

FIG - 7 shows an example of the storage data of the 
address information table 46. In FIG. 7, the distribution 
range of an IP address assigned to a mobile device 
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basically corresponding to a session is stored with the 
load balancing of the packet gateway devices 28a, 28b, . . . 
shown in FIG. 2 taken into account. For example, when the 
load is equally balanced, the distribution range is 
5 determined such that the number of addresses in the 

distribution range can be equal* 

Therefore, the address information table 46 stores 
the distribution range of the IP address, the number of 
assigned IP addresses in the range, the operation state as 
10 to whether or not each packet gateway device is being 

operated, and the address of the user information table as 
a pointer to the user information table 47 storing an IP 
address assigned corresponding to each packet gateway 
device, etc. 

15 FIG. 8 shows an example of the stored data in the 

user information table 47. In FIG. 8, a user identifier, a 
password, mobile device identification information, and a 
phone number are stored as user identification information 
corresponding to the four IP addresses already assigned in 

20 the IP address distribution range for the packet gateway 

device Pgw2 shown in FIG. 7. 

Back in FIG. 5, the details of the process in step S5, 
that is, the processes in steps S10 through S16 are 
described below. When the process is started, the 

25 subsequent steps Sll and S12 are checked in step S10 on 

each record of the address information table. 

In step Sll, it is determined whether or not the 
number of pieces of already assigned address information is 
the smallest. If the smallest number can be detected, then 

30 it is determined in step S12 whether or not the operation 

state of the packet gateway device corresponding to the 
record is normal, that is, being operated. If it is 
normally operated, then control is passed to step S13. If 
it is not being operated, the processes in and after step 

35 S10 are repeated. 
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That is, it is determined whether or not the packet 
gateway device corresponding to the second smallest number 
of already assigned IP addresses is being operated- If it 
is being operated, then control is passed to the processes 
5 in and after step S13. 

In step S13, the address of the user information 
table corresponding to the address distribution range of 
the retrieved record, that is, the IP address assigned by 
the pointer is retrieved, the address not assigned in the 

10 distribution range is retrieved in step 314, the record 

corresponding to the IP address is added to the user 
information table in step S15, the number of assigned IP 
addresses of the records of the packet gateway device 
corresponding to the IP address added in the address 

15 information table is incremented in step SI 6, thereby 

terminating the process* 

FIG . 9 is a block diagram of the configuration of the 
session management device 27 shown in FIG- 2. In FIG ♦ 9, 
the session management device comprises a LAN driver unit 

20 or a WAN driver unit 51, a TCP/IP protocol handler unit 52, 

a communications control unit 53, a session management unit 
54, and a session information table 55 managed by the 
session management unit 54. 

FIG - 10 shows an example of data stored in the 

25 session information table 55. In FIG. 10, the session 

information table 55 stores a session identifier, a mobile 
device identifier, an assigned IP address, and a session 
state of "Act" indicating "in session" corresponding to 
each of sessions which have been already started . 

30 The session management unit 54 of the session 

management device searches the session information table 
using the mobile device identification information as a key 
when it receives a session information retrieval packet 
from the user authentication device 24 as shown in FIG. 3, 

35 and returns the result as a session information retrieval 
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reply packet explained by referring to FIG, 6 to the user 
authentication device 24. 

Based on the reply, the user management unit 44 of 
the user authentication device sets a new IP address or an 
5 already assigned IP address as access accepted, and 

transmits it to the network access device 22, 

The user authentication device 24 assigns an IP 
address in the process according to the flowchart shown in 
FIG, 5 to perform load balancing of the packet gateway 

10 device being operated as described above each time it 

receives an access request. Whether or not the packet 
gateway device is being operated is monitored by the server 
monitor unit 45 of the user authentication device as a 
health check at, for example, predetermined intervals, and 

15 the monitored state is stored in the address information 

table . 

After the assignment of the IP address, the user 
authentication device 24 receives an account start from the 
network access device 22, transmits a session information 

2 0 entry packet from the user management unit 4 4 to the 

session management device 27, and transmits a session start 
notification packet to the packet gateway device 28 
corresponding to the assigned IP address. 

The packet formats of the session information entry 

25 packet and the session start notification packet are shown 

in FIG. 6, In FIG, 6, the session information entry packet 
stores data, that is, a header, a session information entry 
as a packet type, mobile device identification information, 
and an IP address in this order, and the session start 

30 notification packet stores a header, a session start 

notification as a packet type, and an IP address. 

The session management unit 54 of the session 
management device shown in FIG. 9 enters in the session 
information table 55 a record corresponding to a new 

35 session when it is started, and sets the session state as 
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"Act". A session information table is also provided in the 
packet gateway device described later, and the contents are 
the same as those shown in FIG. 10. The session management 
unit in the packet gateway device also enters the record 
5 corresponding to a new session. 

The session management device 27 performs session 
state management through the session management unit 54 
during the period from the reception of a session 
information entry packet from the user authentication 

10 device 24 to the reception of a status change {close) 

described later. In this session state management, the 
session state is managed as one of the four states, that is, 
"None" indicating that the session has not been entered yet, 
"Act" indicating in-session, "Dormant" indicating a non 

15 communications in a predetermined period, and "Close" 

indicating the session termination state. 

FIG ♦ 11 shows the state transition of a session state 
managed by the session management device. In FIG. 11, when 
a session is started in response to the session information 

20 entry by the user authentication device 24, the session 

information indicates "Act" as shown by CD* In this state, 
the dormant timer described later times out, and *ipon 
receipt of a status change (stop) from the user 
authentication device 24 as shown by ©, the session status 

25 changes into "Dormant". 

Otherwise, as described later, for example, when a 
user terminates the communications, that is, when a status 
change (close) in response to the user log-out is received 
from the user authentication device 24, the session status 

30 changes into "Close" as shown by <S) in FIG. 11. 

Although not directly related to the present 
invention, the mobile device packet network constantly 
monitors whether or not the communications with a mobile 
device can be performed, which is called "interim" monitor. 

35 If the communications with the mobile device can be 
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performed, then information that the communications can be 
performed for relatively long intervals, for example for 
30 -minute intervals, is transmitted to the network access 
device 22 shown in FIG* 2* The information is transmitted 
as a status change (interim) from the user authentication 
device 24 to the session management device 27. When the 
information is valid, the session state maintains "Act" as 
shown by (D in FIG . 11* If a timeout of the interim monitor 
timer occurs before the status change (interim) is input 
from the user authentication device 24, then session status 
changes from "Act" to "Close" as shown by ® in FIG. 11. 

When the session state becomes "Dormant", the session 
timer is activated as described later. If a packet from a 
user to a service providing server is input to the network 
before the timeout of the session timer occurs, then the 
user authentication device 24 inputs a status change 
(start) as shown by (D in FIG. 11, and the session state 
becomes "Act" again. 

When a timeout of the session timer occurs when the 
session state indicates "Dormant", the session status 
changes from "Dormant" to "Close" as shown by (7) in FIG. 11. 
Furthermore, for example, when the user terminates the 
communications as described above, a status change (close) 
is input from the user authentication device 24 as shown by 
(H)/ and the session status changes into "Close". 

When the session state becomes "Close" and the 
session log indicating the data of the session is output, 
the session status changes from "Close" to "None" as shown 
by ® in FIG. 11. When the session log is output, the 
corresponding record in the session information table which 
is changed into "Close" is output to the log file, and the 
entry is deleted. 

Described below is the operation of the load balancer 
(L. B.) 25 shown in FIG. 2. FIG. 12 is a block diagram of 
the configuration of the load balancer. In FIG. 12, the 
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load balancer comprises a LAN driver unit or a WAN driver 
unit 61, an address conversion unit 62, a load balancing 
control unit 63, a server monitor unit 64, a load balancing 
policy management unit 65, and a balancing policy 
5 information table 66 managed by the load balancing policy 

management unit 65. 

As shown in FIG ■ 2, the load balancer (L. B.) 
determines to which of the plurality of packet gateway 
devices 28a, 28b, . . . the data packet transmitted from the 

10 mobile device is distributed to. The L. B. transmits the 

data packet through the local area network or wide area 
network (LAN /WAN) 2 6, and rewrites the address portion of 
the packet for the transfer of the packet, thereby 
performing load balancing for the packet gateway device. 

15 The load balancer analyzes the communications 

protocol of the passing packet, and changes the state of 
the TCP connection, that is, "connected", "unconnected", 
"wait for connection", etc., for example, from 
"unconnected" to "connected" for the connection-oriented 

20 protocol (TCP protocol) , thereby managing the TCP 

connection . 

When a connection is made, a packet gateway device to 
which a packet is to be distributed is determined based on 
the contents of the balancing policy information table 66. 

25 The contents of the balancing policy information table 66 

are the same in any of the load balancers (L. B.) 25a, 
25b, ... shown in FIG * 2. 

As shown in FIG. 3, the network access device 22 
starts packet communications in which a user data packet 

30 from the mobile device 20 is transmitted to a service 

providing server after access acceptance from the user 
authentication device 24 is received. The load balancer 
provided on the route between the network access device 22 
and the service providing server receives a user data 

35 packet and performs load balancing by distributing the 
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packet to any of a plurality of packet gateway devices* 

FIG . 13 is a flowchart of the process performed by 
the load balancer. When the process is started as shown in 
FIG* 13, a packet is received by the access conversion unit 
5 62 shown in FIG. 12 first in step S21. In steps S22 and 

S23, the process of retrieving a record whose source IP 
address of the received packet is in the address 
distribution range is performed on each record of the 
balancing policy information table 66. 

10 FIG. 14 shows an example of the data stored in the 

balancing policy information table. In FIG. 14, as 
described above, the destination MAC address, the 
destination state, the substitute destination MAC address 1, 
and the destination state are stored corresponding to the 

15 distribution range of the IP address uniquely assigned to 

the session identification information and mobile device 
identification information . 

The destination MAC address is an address of any of 
the packet gateway devices 28a, 28b, . . . shown in FIG . 2, 

20 and the destination state shows whether or not the packet 

gateway is normally operating. 

The substitute destination MAC address 1 is specified 
by the destination MAC address of the record. It is an 
address of a substitute packet gateway device to which the 

25 data packet having an IP address in the IP address 

distribution range of the record as a source address is to 
be distributed when the packet gateway goes down. 

Although not shown in FIG . 14, when the packet 
gateway specified by the substitute destination MAC address 

30 1 also goes down, the address of another substitute packet 

gateway can be stored. 

Back in FIG. 13, when a record whose source IP 
address is in the address distribution range is retrieved 
in the processes in steps S22 and S23, it is determined in 

35 step S24 whether or not the state of the packet gateway 
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specified by the destination MAC address of the record is 
normal, that is, in operation. If it is normal, then the 
destination MAC address of the received packet is rewritten 
into the destination MAC address of the record in step 325 , 
and the packet is transmitted to the packet gateway device 
having the rewritten MAC address in step S26, thereby 
terminating the process. The storage device, etc. of the 
MAC address in the packet is described later. 

If the state of the packet gateway device specified 
by the destination MAC address is not normal in step S2 4, 
it is determined in step S27 whether or not the state of 
the packet gateway specified by the substitute destination 
MAC address 1 for the record is normal. If it is normal, 
the destination MAC address is rewritten into the 
substitute destination MAC address 1 in step S28 as in step 
325, the packet is transmitted to the gateway device in 
step S26, thereby terminating the process. 

Furthermore, when the state of the packet gateway 
device as the substitute destination is not normal in step 
327, the received packet is rejected in step S2 9, thereby 
terminating the process. As a result, a packet is 
retransmitted in the case of the TCP connection. However, 
if one of the destination and substitute destination packet 
gateway devices is restored to a normal state, then the 
retransmitted packet is transmitted to the restored packet 
gateway, thereby continuing the normal process. If the 
packet gateway device remains abnormal, the retransmitted 
packet remains rejected, and finally the TCP connection is 
disconnected. 

FIG. 15 shows an example of a data format of the 
TCP/IP packet. In FIG. 15, the portion corresponding to 
the Ethernet frame, that is, the IP header and the TCP 
header, are stored before the user data. The source IP 
address determined in step S23 shown in FIG, 13 is stored 
in the portion of the IP header, and the destination MAC 
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address rewritten in steps S25 and S28 is stored in the 
portion corresponding to the Ethernet frame. The above- 
mentioned data format is based on the following document. 

Document) Internet Standard Quick Reference by 
5 Masami Nosaka, O'Reilly Japan 

FIG. 16 is a block diagram of the configuration of 
the packet gateway device . As described above, the data 
packet communicated in a session between a mobile device 
and a service providing server in the system shown in FIG. 

10 2 is communicated in the plurality of packet gateway 

devices 28a, 28b, . . . constantly through the same packet 
gateway device, and the packet gateway device performs load 
balancing for the service providing server, and various 
processes such as the service authenticating process, the 

15 accounting process, etc. as the most important device in 

the present embodiment. 

In FIG. 16, the packet gateway device comprises a LAN 
driver unit or a WAN driver unit 71, an address conversion 
unit 72, a TCP/IP protocol handler unit 73, a load 

20 balancing unit 74, a gateway control unit 75, a server 

monitor unit 7 6, a balancing policy management unit 77, a 
packet information collection unit 78 for collecting 
necessary information for accounting, an accounting 
attribute notification unit 79 for retrieving a necessary 

25 attribute for accounting from a data packet, a service 

authentication unit 8 0 for determining whether or not a 
service for a mobile device can be provided, a proxy reply 
unit 81 for notifying the mobile device that, for example, 
no services can be admitted, an accounting log edition unit 

30 82 for editing an accounting log, a session management unit 

83, a balancing policy information table 84 managed by the 
balancing policy management unit 77, an address information 
storage table 85 storing the necessary address for an 
address conversion of the address conversion unit, a 

35 session information table 85 managed by the session 
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management unit 83, a session information table 86 managed 
by the session management unit 83, a service order 
information table 87 referred to in a service 
authentication, etc., a service providing server 
5 information table 88, an accounting log database (DB) 8 9 

storing an accounting log generated by the accounting log 
edition unit 82, and a distribution information table 90 
storing a server to which a packet is actually distributed 
among the service providing servers capable of providing 

10 the same services corresponding to the TCP connection to 

the mobile device. 

In FIG * 16, since the contents of the session 
information table 86 are the same as those of the session 
information table 55 in the session management device shown 

15 in FIG. 10. Although the balancing policy information 

table 84 has the same name as the balancing policy 
information table 66 in the load balancer, the contents 
relate to the balancing policy, to which of a plurality of 
service providing servers a packet is to be distributed, 

20 corresponding to each service type. Although an example of 

data is described later, the contents are different from 
those of the table shown in 14. 

Furthermore, in FIG, 16, the TCP/IP protocol handler 
unit 7 3 and the gateway control unit 75, the gateway 

25 control unit 75 and the server monitor unit 76, and the 

server monitor unit 76 and the balancing policy management 
unit 77 are directly connected to each other. 

FIGS. 17 through 21 are flowcharts of the packet 
distributing process performed by the packet gateway device, 

30 FIGS. 17 through 19 show the process performed on the 

packet from a mobile device to a service providing server, 
that is, an up packet. FIGS. 20 and 21 show the process 
performed on a down packet from a service providing server' 
to a mobile device. These process flowcharts are described 

35 below by referring to FIGS. 22 and 23. 



28 

FIG, 22 shows an example of the data stored in the 
address information storage table 85 in the packet gateway 
device, and FIG* 23 shows an example of the data stored in 
the balancing policy information table 84. Before 
explaining the processes of the flowcharts shown in FIGS* 
17 through 21, the contents stored in the tables are 
explained below first* 

The address information storage table shown in FIG. 

22 stores the source IP address, the source port number, 
the destination IP address, and the destination port number 
as the stored address information corresponding to the 
unique key information used in storing the source address, 
etc* stored in the packet in the process of rewriting the 
destination address of the packet, etc* in the packet 
gateway device as described later* 

The balancing policy information table shown in FIG* 

23 stores the representative IP address of the group of 
service providing servers depending on the provided service 
type, the number of actual servers, the IP addresses of 
actual servers, the service types in this embodiment, for 
example, the IP addresses of the actual server 1 and the 
actual server 2 as the addresses of the two service 
providing servers of the groups corresponding to mail and 
chats, and "normal" indicating that the state of the server 
indicating whether or not the server is being operated is 
"operating"* As the balancing policy, two actual servers 
are used, for example, alternately to distribute packets* 

FIGS. 17 through 19 are flowcharts of the process of 
distributing an up packet by the packet gateway device, 
that is, a packet transmitted to a service providing server 
from the mobile device (load balancing process for a 
service connecting server) * 

The packet gateway device also functions as a 
transparent proxy. As a TCP/IP system, the device in the 
network, for example, a proxy notifies an upper application 
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of only the MAC address of the packet gateway device on the 
Ethernet layer, and passes other addresses through the 
network. Furthermore, generally, an upper application is 
notified of the process of a packet having the destination 
5 IP address as an address of the packet gateway device in 

the MAC addresses of the packet gateway device, but the 
transparent proxy notifies the upper application of the 
reception of a packet after rewriting an IP address 
although the IP address is not addressed to the packet 

10 gateway device* In this case, the original IP address is 

stored in, for example, a table. 

When the process is started as shown in FIG. 17, the 
address conversion unit 72 receives a packet first in step 
S31, and it is determined in step S32 whether or not the 

15 packet is a connecting packet of a new TCP connection, that 

is, a connection opening packet. If it is an opening 
{connection) packet, then the information about the 
destination address and the source address of the received 
packet is stored in the address information storage table 

20 85 shown in FIG. 16 in step S33 using a unique source port 

number as a key . 

Then, in step S34, the destination address is set as 
the address of the packet gateway device, the source port 
number is set as the above-mentioned unique key number, the 

25 packet is transmitted to the gateway setting unit 75 

through the TCP/IP protocol handler unit 73, the TCP/IP 
protocol process is performed in step S35, and it is 
determined in step S36 whether or not the packet is a 
connection opening (connecting) packet. 

30 If it is an opening packet, the gateway control unit 

7 5 retrieves the destination address information from the 
address information storage table 85 in step S37 using the 
source port number of a packet as a key, and the TCP/IP 
protocol handler unit 73 is requested to perform the normal 

35 TCP connection process on the service providing server 
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based on the destination address in step S38 shown in FIG. 
18. 

In step S39, the TCP/IP protocol process is performed. 
In step S4Q, the load balancing unit 74 refers to the 
5 balancing policy information table 84. In step S41, it is 

determined whether or not the destination address is a 
representative address of a plurality of service providing 
servers for providing the same services. If it is a 
representative address, then it is determined in step S42 

10 whether or not it is a connection opening (connecting) 

packet. If it is an opening packet , then a service 
providing server is selected in step S43 according to a 
balancing policy such as a round robin system, etc., and 
the actual address information is set as the destination 

15 address of a packet. 

Then, in step S44 shown in FIG. 19, the actual 
address of the selected server is stored in the 
distribution information table 90 using the source port 
number as a key, and it is determined in step S4 5 whether 

20 or not a disconnection reply (fin ack) which is a normal 

disconnection request for a TCP connection or an abnormal 
disconnection request (reset) is being transmitted to the 
server. In this example, since the packet is a connection 
opening packet, the address of the packet gateway device is 

25 set as the source address in step S46, and the packet is 

transmitted to the service providing server, thereby 
terminating the process. Since the address of the packet 
gateway device is set as the source address, a down packet 
from the service providing server to the mobile device is 

30 transmitted to the packet gateway device which has 

transmitted an up packet. The processes in steps S45 and 
S57 are performed for the disconnecting process on the TCP 
connection because the TCP connection disconnection reply 
(fin ack) and the abnormal disconnection request (reset) 

35 can be transmitted to the mobile device as the TCP/IP 
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protocol process in step Sill. 

If the received packet is not a connection opening 
(connecting) packet in step S32 shown in FIG* 17, it is 
determined in step S47 whether or not a received packet is 
5 a data packet on the way from the connection to the 

disconnection- In this case, after the address information 
about the destination and the source of the packet is 
retrieved from the address information storage table 85 
using a unique source port number as a key in step S48, the 

10 processes in steps S34 and S35 are performed as on a 

connecting packet. 

If it is determined in step S36 that it is not a 
connecting packet, and if it is determined in step S4 9 that 
it is a data packet on the way, the destination address 

15 information is retrieved in step S50 as in the process in 

step S37 on the connecting packet, a TCP connection is 
identified according to the destination address information, 
and the TCP/IP protocol handler unit 73 is requested to 
perform the data transmitting process in step S51 shown in 

20 FIG. 18. 

The processes in steps S39 to S41 are performed as in 
the process performed on the connecting packet, it is 
determined in step S42 that it is not a connecting packet, 
it is determined in step S52 that it is a data packet on 

25 the way, the actual address of the server at which the data 

packet is to be transmitted from the distribution 
information table 90 is retrieved using the unique source 
port number as a key in step S53 shown in FIG, 19, it is 
determined in step S4 5 that it is not the case of 

30 transmitting a packet of a disconnection reply or an 

abnormal disconnection request, and the packet is 
transmitted in step S46, thereby terminating the process* 

If it is determined in step S47 shown in FIG, 17 that 
the received packet is not a data packet on the way, the 

35 received packet refers to an abnormal disconnection request 
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{reset) for a TCP connection or a disconnection reply (fin 
ask) corresponding to a normal disconnection request, the 
address information about the destination and the source of 
the packet is retrieved in step S54 as in step 548, and the 
5 processes in steps S34 to S36 are performed, it is 

determined that the packet is not a data packet on the way 
in step S49, but it is determined that a disconnection of a 
TCP connection is performed, the destination address 
information is retrieved from the address information 

10 storage table 85 in step S55, the TCP/IP protocol handler 

unit 73 is requested to perform the TCP disconnection 
process on the mobile device side in step S56 shown in FIG, 
18, the TCP connection on the server side is identified 
based on the retrieved destination address in step 355, and 

15 the TCP/IP protocol handler unit 73 is requested to perform 

the disconnecting process. 

Then, if after the processes in steps S39 to S42, it 
is determined in step S52 that it is not a data packet on 
the way, and if it is determined in step S45 shown in FIG. 

20 19 that a packet of a disconnection reply or an abnormal 

disconnection request is to be transmitted to a server, and 
after the deletion of the corresponding record in the 
address information storage table 85 by the address 
conversion unit 72 in step S57, then a packet of a 

25 disconnection reply or an abnormal disconnection request is 

transmitted to a service providing server in step S46, 
thereby terminating the process. 

Since the user authentication device 24 assigns an IP 
address to the mobile device as described above, and a 

30 session before a user log-out is performed can normally 

include a plurality of TCP connections, a TCP connection 
opening (connecting) packet is not always the first packet 
in the session, or a TCP normal disconnection (reply) 
packet or a TCP reset {abnormal disconnection request) 

35 packet is not always the last packet in the session. 
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When the destination address is not a representative 
address in step S41 shown in FIG* 18, control is directly 
passed to step S45 shown in FIG, 19, If the packet is a 
connecting packet or a data packet on the way, then the 
5 packet is transmitted to the destination service providing 

server in step S46, thereby terminating the process* If 
the packet refers to a disconnection reply or an abnormal 
disconnection request, then the processes in steps S57 and 
S46 are performed, thereby terminating the process. 

10 In the case in which the destination address is not a 

representative address in step S41, a packet is transmitted 
with the actual address of a service providing server 
specified in advance instead of transmitting a packet with 
the representative address of a plurality of service 

15 providing servers for providing the same services 

transmitted from the mobile device* In this case, no 
representative address can be detected in the balancing 
policy information table 84, and the packet gateway device 
does not perform load balancing. 

20 FIGS . 20 and 21 show flowcharts of the distributing 

process by the packet gateway device of the down packet, 
that is, a packet transmitted from the service providing 
server to the mobile device. When the process is started 
as shown in FIGS. 20 and 21, the packet transmitted from 

25 the service providing server in step S101 is received by 

the address conversion unit 72, the balancing policy 
information table 84 is referred to in step S102, it is 
determined in step S103 whether or not the corresponding 
record including the actual address of the service 

30 providing server as the source of the packet has been found. 

If it has been found, then the source address is converted 
in step S104 from the actual address of the service 
providing server to a representative address for a 
plurality of servers for providing the same services, and 

35 it is determined in step S105 whether or not the packet is 



34 

an abnormal disconnection request (reset) packet of the TCP 
connection . 

When normal communications are performed in a TCP 
connection, it is determined that the packet is not a reset 
5 packet, the packet is transmitted to the gateway control 

unit 75 through the TCP/IP protocol handler unit 73 in step 
S106, and the TCP/IP protocol process is performed in step 
SX07. 

In step S108 shown in FIG . 21, the gateway control 

10 unit 75 reads the stored address of the mobile device, that 

is, the source IP address from the address information 
storage table 85 using the TCP port number as the 
destination address information about a packet as a key, 
and it is determined in step 3109 whether or not the packet 

15 is a data packet of the TCP connection that is on the way. 

When it is a data packet on the way, the gateway 
control unit 75 specifies a socket in step S110 based on 
the read source {to be a destination} IP address and the 
port number used as a key, and a data transmission is 

20 performed, that is, a send function is issued, through the 

TCP/IP protocol handler unit 73. 

The TCP/IP protocol process is performed in step Sill. 
In step S112, the address conversion unit 72 sets in a 
packet from the address information storage table 85, using 

2 5 the destination port number as a key, the stored 

representative address of the service providing server, 
that Is, the stored destination IP address, and the port 
number, the port number of the mobile device, that is, the 
stored port number. In step S113, it is determined whether 

30 or not a disconnection reply or an abnormal disconnection 

request is transmitted. If not, the address conversion 
unit 72 transmits the packet to the mobile device in step 
3114, thereby terminating the process. The processes in 
steps S113 and S117 are performed so that the TCP/IP 

35 protocol handler unit can transmit the TCP connection 
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disconnection reply (fin ack) and abnormal disconnection 
request {reset) to the mobile device as the TCP/IP protocol 
process for disconnection of a TCP connection in step S35. 

If there are no source address of the received packet, 
that is, the record indicating the representative address 
corresponding to the actual address of the' service 
providing server, in the balancing policy information table 
84 in step S103, that is, if no representative address has 
been specified as the destination address of an up packet 
from the mobile device, then the processes in steps S105 to 
S114 are performed without the process in step S104 
performed, and the packet is transmitted to the mobile 
device. In step S112, the representative address of the 
service providing server is not set, and the packet is 
transmitted in step S114. 

If the received packet is an abnormal disconnection 
request of the TCP connection, that is, a reset packet, 
from the server in step S105 shown in FIG. 20, then the 
address conversion unit 72 deletes the corresponding record 
in the distribution information table 90 in step S115, and 
the processes in steps S106 to S108 are performed. 

It is determined in step S109 that the packet is not 
a data packet. In step 3116, the gateway control unit 75 
specifies a socket based on the destination IP address and 
a port number as a key read in step S108, the TCP 
connection between the server and the mobile device is 
disconnected, that is, a close function is issued through 
the TCP/IP protocol handler unit 73. 

After the processes in steps Sill and 3112, it is 
determined in step S113 that a disconnection packet is 
transmitted. In step S117, the address conversion unit 72 
deletes the corresponding record in the address information 
storage table 85. Then, in step 3114, the packet is 
transmitted, thereby terminating the process. 

The TCP/IP protocol handler unit 73 of the packet 
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gateway device stores the source MAC address of the packet, 
that is, the MAC address of the load balancer as a packet 
source, in the cache table not shown in the attached 
drawings corresponding to the IF address of the received 
5 packet when an up packet is received, When a down packet 

is received, the table is searched to set the MAC address 
of the load balancer which has transmitted an up packet as 
a destination MAC address, and the down packet is 
transmitted to the load balancer* 

10 The above-mentioned address conversion in the packet 

gateway device is further explained below by referring to 
FIG. 24, In FIG - 24, the source address as the address 
information about a TCP/IP packet is input in the format of 
"source network unit* host unit", and the destination 

15 address is input in the format of "destination network unit, 

host unit". 

In response to the up packet 
Net A. GrA, 1 — > Net E, 1 
transmitted from the mobile device to the representative 

20 address Net E. 1 of the service providing server, the 

packet gateway device converts the source address into the 
actual address Net E, 5 of the packet gateway device, and 
the destination address into the actual address Net E, 7 of 
the service providing server as 

25 Net E, 5 — > Net. E. 7, 

and then transmits the conversion result. 

The service providing server which has received the 
up packet transmits a down packet as 
Net E. 7 ~* Net E. 5 

30 to the gateway device, and the packet gateway device 

inversely converts the stored address of the mobile device 
into a destination address, and the source address into the 
representative address of the service providing server, and 
transmits the down packet to the mobile device, 

35 Described below is the service authentication by the 
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packet gateway device. It is determined whether or not a 
service requested by a mobile device, that is, a service 
provided by a corresponding service providing server, is 
available by a user of the mobile device, 
5 As described above, in the conventional mobile device 

packet network described by referring to FIG* 33, a TCP 
connection is managed by a service providing server itself. 
Therefore, for example, a TCP connection is to be 
reconnected each time an available service from the 

10 viewpoint of the mobile device is switched. As a result, 

time delay due to the switching of services including 
service authentication has been a problem. 

FIG * 25 is a flowchart of the service authenticating 
process by the packet gateway device. This process is 

15 basically performed by the service authentication unit 80 

shown in FIG. 16. FIG. 26 shows an example of the data 
stored in the service order information table 87. FIG* 27 
shows an example of the data stored in the service 
providing server information table 88. 

20 When the process is started as shown in FIG. 25, 

first in step S61, the first service request {connection 
start) packet transmitted from the mobile device is 
provided from the gateway control unit 75 for the service 
authentication unit 80, and a source IP address is 

25 retrieved from the packet in step 562. 

The source IP address corresponds to the distributed 
IP address in the session information table 86 shown in FIG. 
10, and the corresponding mobile device identification 
information is retrieved from the table in step S63. 

30 In step S64, a destination IP address is retrieved 

from the received packet. The destination IP address is a 
representative IP address of the group of the service 
providing servers for providing the same services, and the 
service type corresponding to the representative IP address 

35 is determined by referring to FIG. 27. 
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The service order information table shown in FIG. 2 6 
stores the information about whether or not various 
services such as mail, chats, etc* corresponding to mobile 
device identification information are available (OK) * In 
5 step 365, the contents of FIG, 26 are retrieved according 

to the mobile device identification information and the 
service type determined in step S64 . In step 566, it is 
determined whether or not the corresponding service is 
available* 

10 If it is available, then the received packet is 

transmitted to the gateway control unit 75 in step S67, and 
the process of transmitting the packet to the service 
providing server is continued afterwards* If the service 
is not permitted in step S66, then the proxy reply unit 81 

15 transmits a TCP reset packet to the mobile device, thereby 

disconnecting the connection and terminating the process. 

FIG* 28 is a flowchart of the accounting information 
generating process performed by the packet gateway device* 
FIG* 28 is explained by referring to an example of the data 

20 of the accounting record shown in FIG. 29. 

In the conventional system shown in FIG. 33, only the 
service providing server can perform an authenticating 
process in a contract service unit, and an accounting 
record for collection of a fee for pay contents is 

25 generated in a service providing server unit. Therefore, 

they cannot be collectively handled in a proxy accounting 
process, or a proxy accounting for a service fee cannot be 
performed by an externally connected server of the system* 
According to the present embodiment, the packet 

30 information collection unit 78 shown in FIG* 16 collects 

the number of packets and the total packet length for each 
combination of address information about a mobile device 
and address information about a service providing server 
for generation of an accounting log, and notifies the 

35 accounting log edition unit 82 of the result* When there 
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is accounting attribute information to be interpolated for 
designation of an accounting target, the accounting 
attribute, notification unit 7 9 manages the information 
obtained from the data packets of the users, and the result 
5 is transmitted to the accounting log edition unit 82. 

The accounting log edition unit 82 edits the 
accounting log according to the information obtained from 
the packet information collection unit 78 and the 
accounting attribute notification unit 79, and the result 

10 is stored in the accounting log DB 89. The contents of the 

accounting log include a source which can be determined 
from the session information according to the address 
information about the mobile device, a destination as an IP 
address of the service providing server according to the 

15 notification from the packet information collection unit 78, 

and the accounting attribute information obtained from the 
accounting attribute notification unit 79. 

When the process is started as shown in FIG. 28, 
first in step S70, a received packet is received by the 

20 packet information collection unit 7 8 through the address 

conversion unit 72. In step S71, it is determined whether 
or not the packet is a TCP connection opening packet, that 
is, a TCP syn packet. 

If it is an opening packet, a new accounting record 

25 is generated in step S72, a destination IP address, a 

destination IP address is retrieved from a received packet 
by the packet information collection unit 78, and is set in 
the accounting record, and then control is passed to step 
S73. If it is not an opening packet, control is passed 

30 directly to step S73. 

In step S73, it is determined whether or not a 
received packet contains accounting attribute information, 
for example, the URL, etc* of the connection server when an 
external connection is made as shown in FIG. 29. If yes, 

35 the accounting attribute information is set in the 
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accounting record in step 374, and control is passed to 
step S75* If not, control is passed directly to step S75. 

In step S75, the number of packets of the accounting 
records is incremented by 1* In step S76, the packet 
length retrieved from the received packet is added to the 
total packet length of the accounting records* In step S77, 
it is determined whether or not the TCP connection is to be 
disconnected, that is, the received packet is a TCP fin ack 
packet. If not, the processes in and after step S70 are 
repeated • 

If the TCP connection is to be disconnected, the 
packet information collection unit 7 8 transmits an 
accounting record to the accounting log edition unit 82 in 
step S78* In step S79, the accounting log edition unit 82 
edits the accounting record, that is, the mobile device 
identification information is set from the source IP 
address, and the service type and the representative IP 
address of the service providing server are set from the 
destination address* In step S80, the result is written as 
an accounting log to the accounting log DB 8 9, thereby 
terminating the process* FIG * 29 shows the storage result 
in the accounting log DB 8 9, and the collected contents in 
the packet information collection unit 78, for example, the 
destination IP addresses, are converted into mobile device 
identification information and stored as an accounting log. 

FIG* 30 shows the inter-device process sequence when 
a session terminates* FIG. 30 corresponds to the inter- 
device process sequence when a session starts as shown in 
FIG* 3, and shows the sequence when a user log-out occurs 
to terminate the communications by the mobile device 20* 

When the user log-out occurs as shown in FIG* 30, the 
network a.ccess device 22 transmits an account stop to the 
user authentication device 24, the user authentication 
device 24 receives it and transmits a status change (close) 
to the session management device 27, and transmits a 



session termination notification packet to the packet 
gateway device 28. The packet format of these packets is 
shown in FIG. 6. 

The session management unit 54 of the session 
management device deletes a corresponding record in the 
session information table 55, and the session management 
unit 83 of the packet gateway device also deletes a 
corresponding record in the session information table 86. 

FIG. 31 shows the sequence of the processes performed 
In a dormant state, that is, when a TCP connection 
continues but no communications are performed with a mobile 
device for a predetermined period. Normally, the network 
access device 22 transmits an account start to the user 
authentication device 24 when a TCP connection starts, and 
simultaneously starts the monitor by the dormant timer. A 
session information entry from the user authentication 
device 24 to the session management device 27 and a session 
start notification to the packet gateway device 28 are 
similarly transmitted as shown in FIG. 3. 

However, if a timeout of the dormant timer occurs 
before a data packet from the user is transmitted from the 
mobile device 20 to the network access device 22, then the 
network access device 22 transmits an account stop to the 
user authentication device 24 . 

Upon receipt of the account stop, the user 
authentication device 24 transmits a status change (stop) 
to the session management device 27, and the session 
management unit 5 4 of the session management device changes 
the session state of the corresponding record in the 
session information table 55 into "dormant". The session 
management unit 83 of the packet gateway device 2 8 also 
changes the session state of the corresponding record in 
the session information table 8 6 into "dormant". 

The network access device 22 starts monitoring the 
session timer after the timeout of the dormant timer occurs,. 
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If the timeout of the session timer occurs although not 
shown in FIG. 31, then an account stop is transmitted to 
the user authentication device 24 , 

Upon receipt of the account stop, the user 
authentication device 24 transmits a status change {close) 
to the session management device 27, and transmits a 
session termination notification to the packet gateway 
device 28. 

The session management unit 54 of the session 
management device and the session management unit 83 of the 
packet gateway device change the session state of a 
corresponding record in the session information table into 
close . 

On the other hand, when a user data packet is 
received again from the mobile device 20 as shown in FIG. 
31 before a timeout of the session timer occurs, the 
network access device 22 transmits the account start again 
to the user authentication device 24, and transmits the 
data packet to the path of the load balancer. 

When the user authentication device 24 receives the 
account start, it transmits a status change (start) to the 
session management device 27, 

The session management unit 54 of the session 
management device and the session management unit 83 of the 
packet gateway device change the session state of a 
corresponding record in the session information table into 
"act". The transmission/reception of the data packet after 
the load balancer 25 is performed as in the session 
starting process as shown in FIG* 3. 

Described below is the process performed when the 
packet gateway device for performing the most important 
function according to the present embodiment is down. The 
server monitor unit 45 of the user authentication device 
makes a health check for collecting operating states of the 
packet gateway device 28 at predetermined intervals as 



43 

described above. When the packet gateway device is down, 
the load balancer 2 5 and the session management device 27 
is notified of the information. 

The existing session between the packet gateway 
5 device 28 and the service providing server 30 is 

disconnected, and the down packet of the existing session 
is discarded by the packet gateway device 28 or the service 
providing server 30. 

The user management unit 44 of the user 

10 authentication device 24 assigns the address information, 

outside of the range assigned to the down packet gateway 
device, to a new session based on the address information 
table such that the new session cannot be distributed to 
the down packet gateway device. 

15 When the packet gateway devices 2 8 are down in 

multiple, a packet is distributed to a packet gateway 
device as a proxy device for distribution. 

When the packet gateway device 28 is restored, the 
server monitor unit 45 of the user authentication device 

20 notifies the load balancer 25 and the session management 

device 27 of the information. The user management unit 44 
of the user authentication device 24 resumes assigning the 
address information to the restored packet gateway device 
28, and the load balancer 25 resumes distributing a packet 

25 to the restored packet gateway device 28. 

Finally, the process of loading a program according 
to the present embodiment to a computer is described below. 
The packet gateway device 28, the session management device 
27, the user authentication device 24, and the load 

30 balancer 25 having important functions in the present 

embodiment comprise computers as important components. FIG, 
32 is a common block diagram of a computer system. 

In FIG, 32, a computer 91 is configured by a body 92 
and memory 93. The memory 93 can be storage devices of 

35 various forms such as random access memory {RAM) , a hard 
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disk, a magnetic disk, etc. The memory 93 stores the 
programs shown in the flowcharts in FIGS. 5, 13, 17 through 
21, 25, and 28 and the programs according to claims 9 
through 14 of the present invention. By the execution by 
5 the body 92, the connection in the session can be 

maintained, the gateway function including the central 
management of sessions, etc* can be realized. 

Thus, the program can be loaded from a program 
provider to the computer 91 through a network 94, or can be 

10 stored in a portable storage medium 95 marketed and 

distributed, and can be loaded to the computer 91* The 
handy storage medium 95 can be any storage media in various 
forms such as CD-ROM, a flexible disk, an optical disk, a 
magneto-optic disk, etc. These storage media can be set in 

15 the computer 91 to maintain a session, and realize a 

gateway function, etc* 

In the above-mentioned explanation, the embodiment of 
the present invention is explained using a mobile device 
packet network to which a mobile phone as a mobile device 

20 is connected, but the target of the present invention is 

not limited to a mobile device packet network, and any 
communications system having a communications terminal 
connected thereto and using a network having a plurality of 
input/output points of a plurality of service providing 

25 servers can be applied to the communications systems of 

various types. 

As described above in detail, although the network 
access devices are switched and the load balancer are 
dynamically switched by the movement of a mobile device for 

30 passing packets according to the present invention, the 

packet gateway device can distribute the packets to the 
same service providing server, a session can be controlled, 
and effective load balancing can be performed. 
Additionally, the network access device can be 

35 extended/changed without changing the definitions on the 
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mobile device packet network side. 

Furthermore, since the same packet gateway device 
passes not only an up packet to be transmitted to a service 
providing server and a down packet to be transmitted to a 
5 mobile device, but also the subsequent up packet, the 

following five gateway functions can be realized on the 
same path* 

The first function is the central managing capability 
of a session. Although the central management can be 
10 performed by the packet gateway device on a session and 

services are switched from the viewpoint of the mobile 
device, sessions are not to be reconnected among service 
providing servers, thereby requiring no time to switch 
services . 

15 The second function is the risk balancing capability 

when a service providing server goes down. Since the 
packet gateway device can continue a session by switching 
into a substitute server for providing the same services, 
the risk of failing in continuing a service can be avoided. 

20 The third function is the proxy accounting capability* 

Since the packet gateway device can centrally manage 
sessions, the authentication can be performed in a contract 
service unit by referring to the authentication contract 
information about a user of a service, and the accounting 

25 information about the fee for pay contents can be generated 

by proxy. 

The fourth function is the protocol conversion 
capability of a transport layer between a wireless network 
and a cable network. Since an Internet standard service is 
30 used in the wireless communications, the protocol 

conversion of the transport layer between the wireless 
network and the cable network such as a window size, etc. 
can be realized by the packet gateway device. 

The fifth function is the gateway function between an 
35 IP version 4 network and an IP version 6 network. When an 
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Internet protocol version 6 is implemented, the gateway 
function using the current version 4 network can be 
realized. 

5 Industrial Applicability 

The present invention is applicable for wireless and 
cable communications systems* Especially, it is 

effectively used in a communications system which uses a 
large-scale network having a plurality of input/output 
10 points on a service providing server, and is managed by a 

common carrier for providing communications services. 
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Claims 

1, A mobile device communications system which has a 
plurality of service providing servers, and is used for 
5 communications by a mobile terminal , comprising: 

first network means which is connected to the mobile 
terminal and has a plurality of input/output points to and 
from the service providing servers; 

a plurality of first communications distribution 
10 means respectively connected to the plurality of 

input/output points; 

second network means connected to said first 
communications distribution means; 

third network means connected to the plurality of 
15 service providing servers; and 

a plurality of second communications distribution 
means which are connected between said second network means 
and said third network means, for distributing a series of 
communications between the mobile terminal and the service 
20 providing server to any of the plurality of service 

providing server, characterized in that 

said first communications distribution means 
distributes a series of communications between said mobile 
terminal and service providing servers to any of said 
25 plurality of second communications distribution means 

through said second network means. 

2. The system according to claim 1, further comprising 
session management means for assigning an identifier 

to a session as a series of communications between the 
30 mobile terminal and the service providing servers to manage 

the identifier, 

3. The system according to claim 1, characterized in 
that 

each of said plurality of first communications 
35 distribution means comprises same storage contents of 
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distribution destination storage means for storing any of 
said plurality of second communications distribution means 
to which a series of communications are to be distributed 
corresponding to an identifier of a session as the series 
5 of communications between the mobile terminal and the 

service providing servers. 

4- The system according to claim 1, characterized in 
that : 

the plurality of service providing servers form a 
10 plurality of groups each being configured by servers 

providing same services; 

the mobile terminal specifies a representative 

address for each of the plurality of groups to communicate 

with service providing servers; and 
15 said second communications distribution means 

distributes the series of communications to any of the 

service providing servers in a group specified by the 

representative address . 

5* The system according to claim 4, characterized in 
20 that 

when the mobile terminal changes the representative 
address for a change of a service to be obtained in the 
series of communications, said second communications 
distribution means distributes subsequent communications in 
25 the series of communications to any of the service 

providing servers in the group specified by the 
representative address after the change to continue the 
series of communications. 

6. The system according to claim 1, further comprising 
30 server authentication means for checking whether or 

not a user of the mobile terminal has a right to receive a 
service provided by the service providing servers when said 
second communications distribution means distributes the 
series of communications to any of the plurality of service 
35 providing servers. 
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7. The system according to claim 1, characterized in 
that : 

said second communications distribution means can 
distribute the series of communications not only to the 
5 plurality of service providing servers, but also to a 

server external to said mobile device communications 
system; and 

said system further comprises accounting information 
generation means for generating accounting information 
10 about a service received by the mobile terminal from the 

service providing servers or a server external to said 
mobile device communications system* 

8. A mobile device communications method for use with a 
plurality of service providing servers for communications 

15 by a mobile terminal, comprising the steps of: 

the mobile terminal transmitting a packet in a series 
of communications by specifying any of the plurality of 
service providing servers; 

a load balancer, which received the packet, 
20 distributing the packet to any of the plurality of packet 

gateway devices corresponding to an identifier for the 
series of communications; and 

said packet gateway device which was assigned the 
packet distributing the packet to any of the plurality of 
25 service providing servers for performing the same services 

as the service providing server specified by the mobile 
terminal . 

9. A computer-readable portable storage medium which is 
used by a computer configuring a packet gateway device for 

30 distributing communications to a service providing server 

between a plurality of load balancers and service providing 
servers connected to a network to which a mobile terminal 
is connected in a mobile device communications system 
having the plurality of service providing servers for 

35 establishment of communications performed by the mobile 
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terminal, and stores a program used to direct the computer 
to perform the steps of: 

storing a destination address and a source address of 
a packet received from the load balancer using a unique 
5 source port number as a key; 

setting the unique source port number as a source 
port number of a packet header; 

selecting any of a plurality of service providing 
servers capable of providing a service requested by the 
10 mobile terminal from among the plurality of service 

providing servers such that the loads of the service 
providing servers can be balanced; and 

transmitting a packet to the service providing server 
with an address of the selected service providing server 
15 set as a destination address, and an address of the device 

set as a source address, 

10. A program used by a computer configuring a packet 
gateway device for distributing communications to a service 
providing server between a plurality of load balancers and 

20 service providing servers connected to a network to which a 

mobile terminal is connected in a mobile device 
communications system having the plurality of service 
providing servers for establishment of communications 
performed by the mobile terminal, and is used to direct the 

25 computer to perform the procedures of: 

storing a destination address and a source address of 
a packet received from the load balancer using a unique 
source port number as a key; 

setting the unique source port number as a source 

30 port number of a packet header; 

selecting any of a plurality of service providing 
servers capable of providing a service requested by the 
mobile terminal from among the plurality of service 
providing servers such that the loads of the service 

35 providing servers can be balanced; and 
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transmitting a packet to the service providing server 
with an address of the selected service providing server 
set as a destination address, and an address of the device 
set as a source address* 
5 11. A computer-readable portable storage medium which is 

used by a computer configuring a packet gateway device for 
distributing communications to a service providing server 
between a plurality of load balancers and service providing 
servers connected to a network to which a mobile terminal 

10 is connected in a mobile device communications system 

having the plurality of service providing servers for 
establishment of communications performed by the mobile 
terminal, and stores a program used to direct the computer 
to perform the steps of: 

15 retrieving mobile device identification information 

about a mobile terminal as a source of a packet received 
from the load balancer; 

retrieving a destination address of the received 
packet; 

20 determining whether or not a service provided by the 

service providing server of the destination address can be 
provided for a user of the mobile terminal based on the 
mobile device identification information and the 
destination address . 

25 12. A computer-readable portable storage medium which is 

used by a computer configuring a packet gateway device for 
distributing communications to a service providing server 
between a plurality of load balancers and service providing 
servers connected to a network to which a mobile terminal 

30 is connected in a mobile device communications system 

having the plurality of service providing servers for 
establishment of communications performed by the mobile 
terminal, and stores a program used to direct the computer 
to perform the steps of: 

35 retrieving from a packet received from the load 
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balancer a destination address and a source address of the 
packet when a series of communications between the mobile 
terminal and the service providing server start, and 
setting the addresses in an accounting record; 

incrementing the number of packets of an accounting 
record each time a packet is received from the load 
balancer until the series of communications terminate, 
retrieving a packet length from the received packet, and 
adding the packet length to the packet length of the 
accounting record; and 

setting again the source address of the accounting 
record into identification information about a user of the 
mobile terminal, and the destination address into 
information about the service providing server when the 
series of communications terminate* 

13* A program used by a computer configuring a packet 
gateway device for distributing communications to a service 
providing server between a plurality of load balancers and 
service providing servers connected to a network to which a 
mobile terminal is connected in a mobile device 
communications system having the plurality of service 
providing servers for establishment of communications 
performed by the mobile terminal, and is used to direct the 
computer to perform the procedures of: 

retrieving mobile device identification information 
about a mobile terminal as a source of a packet received 
from the load balancer; 

retrieving a destination address of the received 
packet; 

determining whether or not a service provided by the 
service providing server of the destination address can be 
provided for a user of the mobile terminal based on the 
mobile device identification information and the 
destination address. 

14, A program used by a computer configuring a packet 



53 

gateway device for distributing communications to a service 
providing server between a plurality of load balancers and 
service providing servers connected to a network to which a 
mobile terminal is connected in a mobile device 
5 communications system having the plurality of service 

providing servers for establishment of communications 
performed by the mobile terminal, and is used to direct the 
computer to perform the procedures of: 

retrieving from a packet received from the load 

10 balancer a destination^ address and a source address of the 

packet when a series of communications between the mobile 
terminal and the service providing server start, and 
setting the addresses in an accounting record; 

incrementing the number of packets of an accounting 

15 record each time a packet is received from the load 

balancer until the series of communications terminate, 
retrieving a packet length from the received packet, and 
adding the packet length to the packet length of the 
accounting record; and 

20 setting again the source address of the accounting 

record into identification information about a user of the 
mobile terminal, and the destination address into 
information about the service providing server when the 
series of communications terminate. 

25 15. A mobile device communications system which has a 

plurality of service providing servers, and is used for 
communications by a mobile terminal, comprising: 

network means which is connected to the mobile 
terminal and has a plurality of input/output points to and 

30 from the service providing servers; 

a plurality of first communications distribution 
means respectively connected to the plurality of 
input /output points; and 

a plurality of second communications distribution 

35 means, connected between said plurality of first 
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communications distribution means and the plurality of 
service providing servers, for distributing a series of 
communications between the mobile terminal and the service 
providing server to any of the plurality of service 
5 providing servers, characterized in that 

even if the plurality of first communications 
distribution means enter different input points, any of 
said plurality of first communications distribution means 
is distributed to any of said plurality of second 
10 communications distribution means from start to termination 

of the series of communications between the mobile terminal 
and the service providing server. 
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Abstract 



In a communications system connected to a mobile 
terminal and using a network having a plurality of 
input/output points at a plurality of service providing 
servers, a series of communication packets are always 
passed taking the same route. 

Load balancers connected to the plurality of 
input/output points distribute a series of communication 
packets always in the same packet gateway among a plurality 
of packet gateways arranged between the load balancers and 
the service providing servers, and the packet gateway to 
which a packet is distributed distributes the series of 
communication packets to a plurality of service providing 
servers capable of executing an identical service- 
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